Need Admin Approval popup Appears for Guest Users

[adil-wani]

Hi Steve,

I was testing the React Sample with a guest account (abc@gmail.com). I am using a trial container type. When I log in with the same user ID and the verification code or password, I receive a "Need Admin Approval" pop-up, as shown below.

I have already granted admin consent to the required scopes. Am I missing anything, or is this not going to work with guest users/external users? My goal is to test how SharePoint Embedded works with external users.

[asgeirf]

For what it's worth: I didn't try with this sample, but it was possible to get SharePoint Embedded working with an external gmail.com guest account in my tenant, so it is definitely working.

Some quirks though, e.g. it was not possible to list containers as a guest user, but search worked for this purpose (in the 1.0 api, but not in the beta API).

[dluces]

Hey @adil-wani! In that Entra pop up, can you check what scopes are being requested to consent? Can you then check whether the service principal in the consuming tenant for your app registration has been granted admin consent for all the scopes that require it? So a couple of things that would help:

1. Consuming tenant -> azure portal -> Enterprise apps -> (your SPE client ID) -> Permissions. Get a screenshot of the permissions showing admin consent granted.
2. The same screenshot you provided, but paste the URL. It will help us determine whether the same scopes (and not more) are being requested.

@asgeirf regarding the quirks that you have found for guest users, it's not because they are guest users but because they do not have an ODB license. We have been made aware of this issue and are working to address it in the future.